Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Enable ACL Client Token #1093

Merged
merged 19 commits into from
Mar 15, 2022
Merged

Enable ACL Client Token #1093

merged 19 commits into from
Mar 15, 2022

Commits on Mar 15, 2022

  1. Refactor ConsulLogin() to return the acltoken in addition to theerror.

    @jmurret
    jmurret committed Mar 15, 2022
    Configuration menu
    Copy the full SHA
    4dc7dfa View commit details
    Browse the repository at this point in the history

  2. Refactor createACLPolicyRoleAndBindingRule toappend datacenters for l… 

    …ocal tokens. Refactor updateOrCreateBindingRule to create binding rule if there are binding rules but this one does not exist
    @jmurret
    jmurret committed Mar 15, 2022
    Configuration menu
    Copy the full SHA
    7c5223f View commit details
    Browse the repository at this point in the history

  3. Rename -create-client-token flag to -client

    @jmurret
    jmurret committed Mar 15, 2022
    Configuration menu
    Copy the full SHA
    88379a1 View commit details
    Browse the repository at this point in the history

  4. set additional sans for consul server load balancer so that client wi… 

    …ll be able to use the certificate to talk to the load balancers rather than just an individual server.
    @jmurret
    jmurret committed Mar 15, 2022
    Configuration menu
    Copy the full SHA
    7746ad7 View commit details
    Browse the repository at this point in the history

  5. Refactor server-acl-init command to create ACL Policy and Rule for cl… 

    …ient component so that client can call ConsulLogin and receive and ACL Token Call.
    @jmurret
    jmurret committed Mar 15, 2022
    Configuration menu
    Copy the full SHA
    492c8a0 View commit details
    Browse the repository at this point in the history

  6. Enable client to talk to Consul Server to perform consul login. 

    * Pass Auth Method to k8s al-init command.
* Configure Consul address to be the Consul Server Load Balancer.
* Configure CA Cert volume to be in memory rather than k8s secret when using vault.
* Set consul/login volume and CONSUL_HTTP_TOKEN_FILE for use during logout.
* Setup prestop command to perform consul logout.
    @jmurret
    jmurret committed Mar 15, 2022
    Configuration menu
    Copy the full SHA
    be58c6d View commit details
    Browse the repository at this point in the history

  7. Configure client-daemonset so that we can utilize the externalServers… 

    … setting to configure clients to be able to call consul login on a server that is on a different partition.
    @jmurret
    jmurret committed Mar 15, 2022
    Configuration menu
    Copy the full SHA
    b7d9fa3 View commit details
    Browse the repository at this point in the history

  8. Configuring partition-init to remove additional flags and use ones th… 

    …at already exist
    @jmurret
    jmurret committed Mar 15, 2022
    Configuration menu
    Copy the full SHA
    de48da0 View commit details
    Browse the repository at this point in the history

  9. adding missing comma

    @jmurret
    jmurret committed Mar 15, 2022
    Configuration menu
    Copy the full SHA
    f2b59af View commit details
    Browse the repository at this point in the history

  10. fix flakey tests by wrapping asserts in retries a la Iryna

    @jmurret
    jmurret committed Mar 15, 2022
    Configuration menu
    Copy the full SHA
    1cac8f7 View commit details
    Browse the repository at this point in the history

  11. Adding -use-https flag to client-daemonset.yaml when externalServers … 

    …are enabled
    @jmurret
    jmurret committed Mar 15, 2022
    Configuration menu
    Copy the full SHA
    19d0064 View commit details
    Browse the repository at this point in the history

  12. Refactoring tests to cover client-acl-init changes

    @jmurret
    jmurret committed Mar 15, 2022
    Configuration menu
    Copy the full SHA
    2c76ee6 View commit details
    Browse the repository at this point in the history

  13. addressing PR comments

    @jmurret
    jmurret committed Mar 15, 2022
    Configuration menu
    Copy the full SHA
    eb41a15 View commit details
    Browse the repository at this point in the history

  14. removing mounted tmpfs for consul-ca-cert when using vault and restor… 

    …ing datacenter logic because of breaking test.
    @jmurret
    jmurret committed Mar 15, 2022
    Configuration menu
    Copy the full SHA
    14200d1 View commit details
    Browse the repository at this point in the history

  15. addressing PR comments and only appending datacenters to a policy whe… 

    …n its a local token, not global tokens.
    @jmurret
    jmurret committed Mar 15, 2022
    Configuration menu
    Copy the full SHA
    10c9b8c View commit details
    Browse the repository at this point in the history

  16. completing additional dns names based on PR feedback

    @jmurret
    jmurret committed Mar 15, 2022
    Configuration menu
    Copy the full SHA
    c690c57 View commit details
    Browse the repository at this point in the history

  17. Do not ca-cert volume when using vault.

    @jmurret
    jmurret committed Mar 15, 2022
    Configuration menu
    Copy the full SHA
    653f819 View commit details
    Browse the repository at this point in the history

  18. removing unused flagConsulCACert from partition-init command

    @jmurret
    jmurret committed Mar 15, 2022
    Configuration menu
    Copy the full SHA
    1fadcb4 View commit details
    Browse the repository at this point in the history

  19. PR Feedback. Removing unused envvars in acl-init container. changing … 

    …ConsulLogin to return secretID, error instead ok token, error.
    @jmurret
    jmurret committed Mar 15, 2022
    Configuration menu
    Copy the full SHA
    b3a3ac9 View commit details
    Browse the repository at this point in the history